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Akin Gump 

STRAUSS HAUER & FELD LLP 

CHRISTOPHER L. KEOUGH 

1.202.887.4038/fax: 1.202.887.4288 
ckeough@aklngump.com 


March 6,2017 

Via Federal Express Tracking No. 7785 8125 1938 

Social Security Administration 
Office of Privacy and Disclosure 
ATTN: Freedom of Information Officer 
617 Altmeyer Building 
6401 Security Boulevard 
Baltimore, MD 21235 

Re: Expedited Freedom of Information Act Request 

Dear Freedom of Information Officer: 

We are writing to request copies of records under the Freedom of Information Act 
(“FOIA”). We make this FOIA request on behalf of the health care providers (“Providers”) listed 
in the attachment and on the file on the enclosed disk. We request that you produce copies of the 
records described below on an expedited basis. 

The requested records relate to individuals whose social security numbers are listed in the 
enclosed file. The file contains the social security numbers of each deceased individual who was 
a Medicare patient of the Providers during the fiscal years that are referenced in the file. Each of 
these deceased individuals is listed as such on Medicare’s Common Working File. 

For all of the people listed in the Excel file, we request hard copies of all Supplemental 
Security Income Displays (“SSIDs”), current and stale (inactive or active), including the 
computation history field and payment history field, for the periods referenced in the Excel file. 
Where multiple SSIDs exist for an individual, we request all of the SSIDs that include data 
pertaining to the dates of service listed in the enclosed file. 

For the reasons discussed in the attached memorandum, it is clear that disclosure of the 
SSIDs for all of the individuals listed in the enclosed file is both required by the FOIA and 
permitted by the Privacy Act. 

Moreover, as explained in the attached memorandum, we have a compelling need for an 
expedited response to this request under the standard set forth at 20 C.F.R. § 402.140. The 
SSIDs requested above are relevant and material to administrative proceedings involving the 
Providers before the Department of Health and Human Services, Provider Reimbursement 
Review Board. The relevant case numbers for those administrative hearings are listed in the 
enclosed file. Further, the SSIDs are in the Social Security Administration’s sole possession, 
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Social Security Administration 
Office of Privacy and Disclosure 
ATTN: Freedom of Information Officer 
March 6, 2017 
Page 2 


Akin Gump 

STRAUSS HAUER & FELD LLP 


custody and control. In short, our clients need an expedited response to this request to secure 
important legal rights, benefits, and remedies provided for under title XVIII of the Social 
Security Act. 

We are prepared to pay the appropriate fees for the costs of your search for, and copying 
of, the requested records. Please let us know if you need payment of those fees in advance. 
Please notify us when the records are available so that we can arrange for their pick-up. Please 
contact Christopher L. Keough at (202) 887-4038 with any information or questions regarding 
this request. 


Sincerely, 



Christopher L. Keough 
Counsel for the Providers 


Enclosures 
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Memorandum Regarding Standards for 

Disclosure of Requested Records 

March 6, 2017 

I. An Expedited Response Is Necessary 

The Providers listed in the enclosed Excel file have a compelling need for an expedited 
response to the accompanying request for records because otherwise they “may be denied a legal 
right, benefit, or remedy,” and the requested information “cannot be obtained elsewhere in a 
reasonable amount of time.” 20 C.F.R. § 402.140(d). 

A. The Records Requested Are Relevant and Material to Pending Litigation 
Before A Federal Agency 

The SSIDs requested in the accompanying letter are relevant and material to 
administrative proceedings involving the Providers before the Department of Health and Human 
Services, Provider Reimbursement Review Board (“Board”). The dispute in those proceedings 
centers on the accuracy of the “Medicare/SSI percentage” that the Centers for Medicare and 
Medicaid Services (“CMS”) calculates annually for the Providers. The Medicare/SSI percentage 
determines the amount of the Medicare payment due to them for the cost of treating a 
disproportionate share of low-income patients. See 42 U.S.C. § 1395ww(d)(5)(F)(vi); 42 C.F.R. 

§ 412.106(b). The Medicare/SSI percentage must reflect the proportion of the Providers’ total 
Medicare inpatient hospital days that are attributable to patients who, for such days, were also 
entitled to federal Supplemental Security Income (“SSI”) benefits. See 42 U.S.C. § 
1395ww(d)(5)(F)(vi)(I); 42 C.F.R. § 412.106(b)(2). 

The Providers are challenging the accuracy of the Medicare/SSI percentages computed 
by CMS for each of the periods at issue in the above-referenced administrative proceedings. The 
Providers contend that CMS improperly failed to account for patient days for some patients who 
were entitled to SSI benefits, causing it to understate the Providers’ Medicare/SSI percentages. 
As a result, the Providers contend that they not been paid the amount to which they are entitled 
by law. 


B. The Requested Records Are Needed to Secure A Legal Right, Benefit, or 
Remedy and Cannot Be Obtained Elsewhere 

The Social Security Administration’s (“SSA”) failure to produce the requested records on 
an expedited basis would deny the Providers due process rights in connection with the above- 
referenced appeals under Section 1878 of the Social Security Act, and could effectively deprive 
them of their statutory entitlement to payment under 42 U.S.C. § 1395ww(d)(5)(F) for the costs 
of treating a disproportionate share of low-income patients. In light of the Providers’ pending 
appeals, the requested SSIDs are needed as soon as possible, so that the Providers have a 
reasonable opportunity to review them in advance of any administrative hearings. 
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Further, the SSIDs requested here are the only potential source of data reflecting the 
federal SSI eligibility of the Medicare beneficiaries who were treated by the Providers during the 
periods at issue in the above-referenced appeals, but who were not included in CMS’ calculations 
of their Medicare patient days attributable to patients who were, for such days, entitled to federal 
SSI benefits. See Baystate Med. Ctr. v. Leavitt, 545 F. Supp. 2d 20, 51 (D.D.C.), amended, 587 F. 
Supp. 2d 37 (D.D.C. 2008) (explaining that “CMS and SSA were in sole possession of the SSI 
data” sought here). Without the SSIDs, the Providers are unable to identify which of their 
patients were entitled to SSI benefits, but were nonetheless omitted from the Medicare/SSI 
percentage. Because the SSIDs for these individuals are in SSA’s sole possession, custody, and 
control, the Providers need an expedited response to this request to secure important legal rights, 
benefits, and remedies provided for under title XVIII of the Social Security Act ( i.e ., the 
Medicare program). 

C. The Records Requested Are Readily Available and This Request Can Be 
Easily Processed 

The SSIDs requested above are readily available in SSA’s electronic eligibility files. 
These electronic records are maintained centrally and can be accessed easily from SSA’s central 
office. Further, we understand that SSA has software and programs available to permit batch¬ 
processing of this request on an automated basis (based on the social security numbers being 
furnished herewith). Thus, a response to this request can be easily prepared from readily 
available electronic records with minimal burden or expense. 

II. The Requested Records Are Not Exempt From Disclosure 

SSA regulations provide for the disclosure of personal records, without consent, if 
“required by the FOIA” or “permitted by the Privacy Act.” 20 C.F.R. § 401.100. 1 Both of these 
independent bases for disclosure are met here, so each independently requires SSA to release the 
records requested in the accompanying letter. 

A. FOIA Requires Disclosure 

FOIA requires SSA to disclose information in its records unless one of nine narrow 
exemptions applies. Thompson v. Exec. Office for U.S. Attorneys, 587 F. Supp. 2d 202, 205-06 
(D.D.C. 2008); 5 U.S.C. § 552; 20 C.F.R. § 401.130. Section 552(b) of the FOIA lists the nine 
types of records that are exempt from mandatory disclosure. 5 U.S.C. § 552(b). Only one of 
those exemptions is even potentially applicable here. That exemption covers “personnel and 
medical files and similar files the disclosure of which would constitute a clearly unwarranted 
invasion of privacy.” 5 U.S.C. §552(b)(6). Importantly, however, SSA regulations explicitly 
acknowledge that this provision does not exempt disclosure of SSI eligibility records concerning 


1 The Privacy Act does not permit SSA to withhold information that it is required to disclose under the 
FOIA. 5 U.S.C. § 552a(t)(2); Crumpton v. Stone, 59 F.3d 1400, 1405 (D.C. Cir. 1995). We nonetheless address 
both the FOIA and the Privacy Act to show that, in this case, disclosure is independently mandated under either 
standard. 
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deceased individuals. 20 C.F.R. § 401.190 (“We do not consider the disclosure of information 
about a deceased person to be a clearly unwarranted invasion of that person’s privacy.”). Thus, 
because the Providers only seek SSIDs for deceased individuals, no exemption applies, and the 
FOIA mandates their disclosure. 

B. Privacy Act Permits Disclosure 

“Congress enacted the Privacy Act to provide certain safeguards for an individual against 
an invasion of personal privacy, by requiring governmental agencies to maintain accurate records 
and providing individuals with more control over the gathering, dissemination, and accuracy of 
agency information about themselves.” Bechhoefer v. U.S. Dep’t of Justice DEA, 209 F.3d 57, 59 
(2d Cir. 2000) (internal quotation marks omitted). 

Importantly, the Privacy Act does not prohibit disclosure of SSI eligibility records 
relating to individuals who are now deceased. See 20 C.F.R. § 401.25 (when used in connection 
with the Privacy Act and the rules governing program information, the term “individual” means a 
living person); 65 Fed. Reg. 82,482 (stating that “as a general rule, under the Privacy Act, 
privacy rights are extinguished at death”); Crumpton v. United States, 843 F. Supp. 751, 756 
(D.D.C. 1994), aff’d sub nom., Crumpton v. Stone, 59 F.3d 1400 (D.C. Cir. 1995) (noting that the 
Privacy Act does not apply to the release of information concerning a deceased person). 

Additionally, the Privacy Act and SSA’s implementing regulations demonstrate that the 
Providers are entitled to access the documents. Those provisions permit disclosures without an 
individual’s consent if the information is to be used for a purpose that is compatible with the 
purposes for which the information was collected. Any such compatible use of data is kn own as 
a “routine use.” 5 U.S.C. §§ 552a(a)(7), (b)(3), (e)(4); 20 C.F.R. §§ 401.25, 401.150. 

SSA has established a routine use permitting the release of information from the 
Supplemental Security Income and Special Veterans Benefits Record 60-0103 to a federal 
agency tribunal (in this case the Board), or a party before such tribunal (the Providers), where 
“[t]he United States or any agency thereof... or any of its components is a party to litigation or 
has an interest in such litigation” and SSA determines that the tribunal’s use of the records is 
relevant and material to the litigation before it and is compatible with the purpose for which the 
records are collected. 65 Fed. Reg. 32,142, 32,144 (May 22, 2000). 

This routine use allows for the release of the requested information to the Providers’ 
counsel in connection with the administrative proceedings pending before the Board. The Board 
is a component of the Department of Health and Human Services. As a party to those 
proceedings before the Board, the Providers are challenging the accuracy of the Medicare/SSI 
percentages that were computed by CMS to determine the Providers’ disproportionate share 
hospital payments. CMS is a party-in-interest in those proceedings and clearly has a substantial 
interest in the appeals. Moreover, disclosure of the records requested here is necessary for the 
Board to verify the accuracy of the data furnished to CMS by SSA in connection with CMS’ 
determination of the disproportionate share hospital payments due the Providers for the periods 
at issue in the pending appeals before it. 
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In addition, SSA has already determined that disclosure of the records sought here is 
compatible with the purposes for which the information was collected. SSA has published a 
routine use permitting the release of information from the same data record to “Federal, State or 
local agencies (or agents on their behalf) for administering cash or non-cash income maintenance 
or health maintenance programs (including programs under the [Social Security] Act).” 65 Fed. 
Reg. 32,142, 32,144 (May 22, 2000). Thus, since 1986, SSA has regularly released from the 
same data record SSI eligibility information—like that requested here—to CMS in connection 
with CMS’ calculation of the Medicare/SSI percentages at issue in the Providers’ pending 
appeals before the Board. See 65 Fed. Reg. 50,548 (Aug. 18, 2000). 

Another established “routine use” also permits disclosure of SSI eligibility information to 
a hospital in the very circumstances at issue here. 65 Fed. Reg. 50,548, 50,549 (Aug. 18, 2000). 
This routine use permits disclosure to “a hospital that has an appeal properly pending before the 
[Board], or before an intermediary, on the issue of whether it is entitled to disproportionate share 
hospital payments, or the amount of such payments.” Id. “Disclosure under this routine use 
shall be for the purpose of assisting the hospital to verify or challenge [CMS’] determination of 
the hospital’s SSI ratio (/.<?., the total number of Medicare days compared to the number of 
Medicare/SSI days).” Id.; see also 70 Fed. Reg. 47,278, 47,439 (Aug. 12, 2005) (allowing for 
disclosure of some of this same information without a fee and before the hospital has a hearing 
before the Board). 

Taken together, logic and common sense dictate that if SSA’s release of the requested 
records to CMS is compatible with the purposes for which the information is stored (and 
established routine uses confirm that it is), and if CMS’ release of that same information to 
hospitals in the context of appeals before the Board is also compatible (and an established 
routine use confirms that it is), then it necessarily follows that SSA may disclose the same 
information directly to hospitals (in this case the Providers) in connection with the hospitals’ 
appeals to the Board. 

Moreover, as noted above, the Privacy Act does not permit SSA to withhold information 
that it is required to disclose under the FOIA. 5 U.S.C. § 552a(t)(2); Crumpton v. Stone, 59 F.3d 
1400, 1405 (D.C. Cir. 1995). And, for the reasons discussed above, it is clear that the SSIDs 
requested herein are not exempt from mandatory disclosure under the FOIA. 

For the foregoing reasons, we request expedited release of the records requested in the 
accompanying letter. 2 3 


2 By definition, SSA or another federal agency must find a use of data to be compatible with the purposes 
for which it is collected in order to deem it a “routine use” and publish that use in the Federal Register as such. 5 
U.S.C. §§ 552a(a)(7), (b)(3), (e)(4); 20 C.F.R. §§ 401.25, 401.150. 

3 The Providers are willing to execute a data use and confidentiality agreement with CMS as to SSI 
eligibility data furnished to them by CMS in connection with the pending appeals before the Board. 
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